Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: eZ3vN410ciG8OYsucZRnBUqX428frOysdb4WZL8ZAL0=
Subject key identifier: FB:E3:7E:37:0A:36:D9:90:13:3E:AA:73:10:D4:1D:F1:58:6D:9E:D5
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019E295DF28A7D634807BE2E1FC4C465975D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1914
Signing time: Fri 15 May 2026 02:01:23 +0000
Manifest this update: Fri 15 May 2026 02:01:23 +0000
Manifest next update: Sat 16 May 2026 02:01:23 +0000
Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
3: SHKEVaNgH9Bucka6k6DYJtipntE.roa (hash: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M=)
4: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
5: VHWtEL_iyyJZZOqjrL2J-IKargg.roa (hash: rnSeZqJKS3ZOhG3KIGaYj7ByHskvac+xvOyX10SyZy8=)
6: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: /LiCbXn/Mne5M/mdXOPoegp05fso6cH2S+u0orWEVRw=)
7: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
8: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
9: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:f2:8a:7d:63:48:07:be:2e:1f:c4:c4:65:97:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: May 15 02:01:23 2026 GMT
Not After : May 16 02:01:23 2026 GMT
Subject: CN=fbe37e370a36d990133eaa7310d41df1586d9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:5e:f4:6f:7d:17:e2:c7:16:36:ad:89:e0:
b7:09:60:1a:f5:b7:61:da:de:7b:43:f9:16:2d:52:
f7:a1:fa:ca:f0:2e:fe:ca:70:b8:98:b5:cb:da:56:
e0:44:02:20:db:bb:e0:17:e5:ea:cb:5f:f1:a4:bc:
0c:be:c3:ff:db:20:99:c2:90:85:a5:ac:0d:78:df:
8a:1e:7b:d1:7a:c7:25:8f:25:fc:d7:2c:3c:45:bc:
6d:80:d3:06:7a:46:e5:26:05:bc:5c:3f:18:14:7d:
e7:53:58:75:1c:29:c8:c9:83:3a:b1:20:8b:23:6a:
ed:b3:09:ca:f7:a1:70:ac:23:9e:46:01:d6:dd:c5:
3a:6f:20:11:e1:66:ae:b1:e2:a1:23:a3:4b:62:04:
cf:43:73:61:c7:f2:d5:f7:1e:67:92:e6:d2:fa:f0:
9d:39:22:92:ad:7a:bd:03:90:9a:03:c2:28:00:c7:
94:57:ad:f5:4b:4c:91:52:4b:16:1e:87:d2:d0:10:
f6:c4:6f:81:76:29:05:d6:cf:34:74:30:96:39:42:
73:ad:94:55:de:55:dd:a5:cd:8e:f4:bd:8b:e1:c5:
1a:a9:d0:a4:2c:da:3e:54:44:9e:c9:a7:a3:95:1b:
60:a4:34:d2:2f:0b:0e:25:46:03:f8:32:e4:d9:c5:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E3:7E:37:0A:36:D9:90:13:3E:AA:73:10:D4:1D:F1:58:6D:9E:D5
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:74:99:dc:d7:0d:27:e3:82:e7:40:6e:8a:8a:1b:db:9a:
79:36:0f:d8:99:e7:06:41:1f:c9:f3:8f:11:d1:7d:f4:fc:d2:
fb:92:12:ed:aa:e7:b9:70:fd:e2:64:9f:e9:c5:eb:90:f9:2f:
67:0c:44:ed:15:62:28:96:be:89:c5:3f:65:68:0a:af:79:a1:
66:e6:a7:2e:f7:69:2b:22:9a:0c:75:62:54:2d:1f:4a:18:c0:
97:89:1f:ae:64:11:ae:27:99:cc:be:cb:01:14:4f:eb:98:eb:
9d:17:87:f4:f3:13:3d:2f:ed:a0:a1:aa:27:5e:8a:8e:ec:87:
9a:6c:10:75:59:17:04:1a:cf:c5:92:cc:9c:0a:fb:db:4f:4f:
0d:f9:a4:79:bd:cf:44:1c:d7:3c:7d:21:c3:da:d5:97:4c:47:
30:a7:48:50:b8:03:0d:d1:81:63:34:2c:fa:16:ef:1c:87:0f:
70:5d:a9:9e:2e:61:fe:91:f7:01:fc:d6:57:a4:82:b7:da:4c:
58:22:cb:8d:a8:d3:32:ac:d9:cc:6f:a0:05:80:52:15:a7:60:
5a:6f:6a:27:d2:e4:9e:f8:0d:0f:8c:64:72:eb:d6:23:a7:b4:
15:8f:93:b9:8a:f2:32:28:db:6c:87:6a:80:74:f7:6c:47:14:
73:e9:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:33 2026 by rpki-client